VULNERABILITY INTELLIGENCE

CVE-2024-36310

EPSS probability0.20%
CISA KEVNot currently listed
Published2026-02-10
Last modified2026-06-17

Description

Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of confidentiality or integrity.

Weakness classification

  • psirt@amd.com: CWE-124

Primary references